$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer (raw, json) Hash identifier: BZ+0eYJn4MI+DStN5HqpSkUM1pChvT/lSNknPnQJrRc= Subject key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2B74911D0AFBA65BA0580963E8A8246F78199BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft caRepository: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 02 Jul 2025 01:52:53 +0000 Certificate not after: Wed 01 Jul 2026 01:57:53 +0000 Subordinate resources: IP: 103.168.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:74:91:1d:0a:fb:a6:5b:a0:58:09:63:e8:a8:24:6f:78:19:9b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 01:52:53 2025 GMT Not After : Jul 1 01:57:53 2026 GMT Subject: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:d3:ff:2d:cd:fa:06:aa:bd:93:1c:d9:22: bb:06:17:6a:40:72:cc:de:5d:ad:df:7e:e3:d7:a5: cb:91:bf:35:7f:52:6f:8c:45:45:35:b9:51:d0:00: 80:83:b9:de:7a:a2:2b:4d:7a:89:43:0d:8e:9f:fd: ad:aa:65:63:ac:20:54:c1:35:9a:50:7f:fe:55:87: 7d:48:db:75:d5:05:11:3e:1c:2e:e1:01:ed:4e:22: d1:9a:a5:d1:df:bc:29:7c:44:fe:17:f2:a2:5b:36: fc:f0:4a:da:43:fd:91:98:83:de:ba:21:04:28:59: 3b:87:89:52:c0:22:25:3c:e9:dd:5e:17:53:e4:f6: 48:cb:ed:18:62:e2:a1:35:05:63:6d:f0:10:8c:61: a6:50:a3:d9:d2:e5:53:d7:ab:c2:60:bc:42:3f:c8: d4:7e:74:f6:ef:27:a6:e1:43:6f:af:06:ed:78:a2: c2:6c:d3:93:95:45:30:ce:a6:5e:cb:97:06:29:4f: f1:b7:e6:9d:5e:73:03:c3:3e:17:19:79:50:1b:9a: cf:45:82:7a:8c:50:67:ea:88:ac:96:bc:92:95:54: 02:cd:cf:81:90:52:5d:0c:a5:f4:74:4f:40:ce:83: fa:5b:27:67:8f:a8:a9:c2:10:fb:e8:e6:7e:2c:84: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.24.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:6a:87:78:93:e4:48:ea:44:60:75:79:fe:e1:11:2f:b0:74: 25:ac:7c:48:02:54:de:3f:f9:11:22:a5:eb:b0:73:88:fb:56: 4e:f1:d3:80:cd:f2:93:ed:05:e1:49:e5:2b:54:87:82:77:1e: ab:02:90:fa:e1:34:3b:e1:f2:dc:ed:bc:c4:95:10:9c:9c:1f: 72:f3:a4:89:28:1e:87:a5:5a:e8:e1:21:e5:c4:fb:4e:70:b5: df:98:f6:0e:83:95:e1:d6:f7:96:3e:44:1b:b2:78:b5:aa:54: dd:cb:14:53:9c:d3:13:40:7c:5e:79:0f:4e:f0:3b:8a:99:79: 4f:94:b4:e8:17:c1:3b:73:f2:73:5e:a6:18:24:ee:f3:6b:ea: 29:7c:eb:dc:c8:92:08:5b:b5:2f:8d:0d:d5:d7:ce:65:fd:ca: 62:66:f6:e8:c4:e3:56:96:47:92:ca:88:34:ed:3e:63:4d:64: 78:6e:13:09:90:a4:8d:04:ee:7b:9e:c5:32:d7:e4:cd:a0:e5: 88:a1:fb:12:96:84:0e:3d:7f:aa:00:85:84:ae:3a:81:01:f7: 1c:91:c2:c5:36:de:41:80:c4:90:ba:a4:d4:18:54:f3:77:6a: b6:db:9c:bb:7d:86:f8:1a:80:7c:58:97:7a:b4:2b:54:46:b5: 71:bf:50:46 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUK3SRHQr7plugWAlj6Kgkb3gZm8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMjAxNTI1M1oX DTI2MDcwMTAxNTc1M1owMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4 NEQwRDE1OEM2MDAwRjI1NjFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdj0/8tzfoGqr2THNkiuwYXakByzN5drd9+49ely5G/NX9Sb4xFRTW5UdAA gIO53nqiK016iUMNjp/9raplY6wgVME1mlB//lWHfUjbddUFET4cLuEB7U4i0Zql 0d+8KXxE/hfyols2/PBK2kP9kZiD3rohBChZO4eJUsAiJTzp3V4XU+T2SMvtGGLi oTUFY23wEIxhplCj2dLlU9erwmC8Qj/I1H509u8npuFDb68G7XiiwmzTk5VFMM6m XsuXBilP8bfmnV5zA8M+Fxl5UBuaz0WCeoxQZ+qIrJa8kpVUAs3PgZBSXQyl9HRP QM6D+lsnZ4+oqcIQ++jmfiyEZ7UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG3qmydezPuSDgqE0NFYxgAPJWH3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYjc3ZDFl LTE1ODUtNDYwNC1iNmIxLTA3MWYwYTI5NDBjNC8wLzZERUE5QjI3NUVDQ0ZCOTIw RTBBODREMEQxNThDNjAwMEYyNTYxRjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqBgwDQYJKoZIhvcNAQELBQADggEBAJtqh3iT5EjqRGB1ef7hES+wdCWsfEgC VN4/+REipeuwc4j7Vk7x04DN8pPtBeFJ5StUh4J3HqsCkPrhNDvh8tztvMSVEJyc H3LzpIkoHoelWujhIeXE+05wtd+Y9g6DleHW95Y+RBuyeLWqVN3LFFOc0xNAfF55 D07wO4qZeU+UtOgXwTtz8nNephgk7vNr6il869zIkghbtS+NDdXXzmX9ymJm9ujE 41aWR5LKiDTtPmNNZHhuEwmQpI0E7nuexTLX5M2g5Yih+xKWhA49f6oAhYSuOoEB 9xyRwsU23kGAxJC6pNQYVPN3arbbnLt9hvgagHxYl3q0K1RGtXG/UEY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:50 2025 by rpki-client